devtale (>=0.1.2, <=0.1.4), gitmaid (0.1.0) +3 more potentially affected by CVE-2026-55443 via langchain (0.0.251)

langchain PYPI version 0.0.251 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - devtale =0.1.2, =0.1.0, =0.4.0, =0.5.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

gpt3discord (>=11.8.0, <=11.8.2), llama-cpp-http (>=0.1.0, <=0.2.7) +3 more potentially affected by CVE-2026-55443 via langchain (0.0.268)

langchain PYPI version 0.0.268 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gpt3discord =11.8.0, =0.1.0, =0.0.1, =0.7.2, =0.1.0, =0.3.22 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

atradebot (0.1.0), jaankoppe-llama-index (>=0.8.26.post2, <=0.8.26.post3) potentially affected by CVE-2026-55443 via langchain (0.0.262)

langchain PYPI version 0.0.262 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - atradebot 0.1.0 - jaankoppe-llama-index =0.8.26.post2, =0.8.26.post3 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

langserve (0.0.1), llama-cpp-http (0.2.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.304)

langchain PYPI version 0.0.304 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - langserve 0.0.1 - llama-cpp-http 0.2.9 - openbrain =0.13.0, =0.1.0, =0.2.13 Source cves: CVE-2026-55443 Source advisory:...

arxiv-bot (>=0.0.5, <=0.0.6), langchain-utils (>=0.3.18, <=0.3.24) +3 more potentially affected by CVE-2026-55443 via langchain (0.0.141)

langchain PYPI version 0.0.141 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - arxiv-bot =0.0.5, =0.3.18, =0.1.0, =1.0.1, =0.0.1, =0.0.6 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

gerri (1.0.0), ia-planner-jerson (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2026-48818 via starlette (0.41.2)

starlette PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - gerri 1.0.0 - ia-planner-jerson =0.1.0, =0.1.0, =1.6.52, =25.4.0, =0.5.4, =1.1.1, =0.0.74, =0.0.75 Source cves: CVE-2026-48818 Source advisor...

athina (1.1.0), guardrails-api (>=0.0.4, <=0.1.0) +1 more potentially affected by CVE-2026-45758 via guardrails-ai (>=0.3.3, <=0.8.0)

guardrails-ai PYPI version =0.3.3, =0.0.4, =0.0.1, =0.6.0 Source cves: CVE-2026-45758 Source advisory: OSV:PYSEC-2026-206...

Empirical Evaluation of Large Language Models for Migration of Code Fragments to Post-Quantum Cryptography

The transition to post-quantum cryptography PQC requires not only replacing vulnerable cryptographic primitives, but also refactoring the surrounding software logic. While existing PQC migration frameworks provide organizational guidance, practical code-level remediation remains largely manual an...

Beyond Pass/Fail: Using Process Mining to Understand How LLMs Resist (And Fail) Red Team Attacks

Standard AI red teaming evaluations reduce adversarial campaigns to a single binary outcome, attack success rate ASR, not taking into account the sequential structure of how models resist or yield to attacks. We propose applying process mining, a discipline for discovering and analyzing process...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-47214 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-47214 Source advisory: OSV:GHSA-Q29V-XC37-WH5M...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-44017 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-44017 Source advisory: OSV:GHSA-CJQG-RQ2H-2FVJ...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-5241 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

adapters (>=0.0.0.dev20231111, <=0.0.0.dev20231116), ag-llama-api-s (0.0.12) +44 more potentially affected by CVE-2026-5241 via transformers (4.33.3)

transformers PYPI version 4.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231111, =0.0.13, =0.0.15, =0.0.29, =0.1.0, =0.3.0, =0.0.1, =0.1.36a0, =1.1.1, =0.1.1, =0.1.5 and more Source cves:...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-4372 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

gerri (1.0.0), ia-planner-jerson (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2026-48710 via starlette (0.41.2)

starlette PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - gerri 1.0.0 - ia-planner-jerson =0.1.0, =0.1.0, =1.6.52, =25.4.0, =0.5.4, =1.1.1, =0.0.74, =0.0.75 Source cves: CVE-2026-48710 Source advisor...

Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems

Injection detectors deployed to protect LLM agents are calibrated on static, template-based payloads that announce themselves as override directives. We identify a systematic blind spot: when payloads are generated to mimic the domain vocabulary and authority structures of the target document, wh...

athina (1.1.0), guardrails-api (>=0.0.4, <=0.0.5) +1 more potentially affected by CVE-2026-31233 via guardrails-ai (>=0.3.3, <=0.5.15)

guardrails-ai PYPI version =0.3.3, =0.0.4, =0.0.1, =0.6.0 Source cves: CVE-2026-31233 Source advisory: OSV:GHSA-R6HF-G5X6-7PV9...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31248 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31248 Source advisory: OSV:GHSA-9F4Q-Q82Q-4359...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31247 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31247 Source advisory: OSV:GHSA-CR42-RG2M-MQ4Q...

ai-dynamo (>=0.1.0, <=0.3.0), bentoctl (0.2.3) +6 more potentially affected by CVE-2026-44346 via bentoml (>=1.0.0a7, <=1.4.8)

bentoml PYPI version =1.0.0a7, =0.1.0, =1.0.1, =0.3.12.dev20240709150559, =0.0.1, =1.0.3, =0.0.10, =0.6.30 - raptor-labsdk 0.3.2 Source cves: CVE-2026-44346 Source advisory: OSV:GHSA-W2PM-X38X-JP44...